If we have Azure SSO, and an admin signs in before they are invited in the PMP console, it's extremely easy for them to accidentally create a new company instead. Automatic provisioning would allow admins to skip the need to assign access on both ends for every admin, avoid this potential accidental company creation, as well as provision by groups with specific roles tied to specific groups as needed.